Using Admission Control Plugins for Tanzu Kubernetes Grid Integrated Edition Clusters

The topics below describe how to manage and use admission control plugins for VMware Tanzu Kubernetes Grid Integrated Edition (TKGI) clusters.

For more information about Admission Controllers, see Using Admission Controllers in the Kubernetes documentation.

For details on the admission control plugins supported by TKGI, see:

• Enabling the PodSecurityAdmission Plugin for Tanzu Kubernetes Grid Integrated Edition Clusters and Using Pod Security Admission
• Enabling the SecurityContextDeny Admission Plugin for Tanzu Kubernetes Grid Integrated Edition Clusters
  

  Note: The SecurityContextDeny admission controller has been deprecated, and the Kubernetes community recommends the controller not be used. TKGI support for SecurityContextDeny will be removed in TKGI v1.18. Pod security admission (PSA) is the preferred method for providing a more secure Kubernetes environment. For more information about PSA, see Pod Security Admission in TKGI.

To deactivate an admission control plugin, see:

• Deactivating Admission Control Plugins for Tanzu Kubernetes Grid Integrated Edition Clusters